Skip to content

fix: use pull_request_target for fork PR reviews#210

Merged
himanshu231204 merged 1 commit into
mainfrom
fix/pr-review-fork-permissions
Jul 22, 2026
Merged

fix: use pull_request_target for fork PR reviews#210
himanshu231204 merged 1 commit into
mainfrom
fix/pr-review-fork-permissions

Conversation

@himanshu231204

Copy link
Copy Markdown
Member

Summary

Changes the PR review workflow trigger from pull_request to pull_request_target to enable reviews on fork PRs.

Changes

  • Changed trigger from pull_request to pull_request_target
  • Added explicit
    ef to checkout fork's commit SHA

Why

The previous setup used pull_request which gives a read-only token for fork PRs, causing 403 errors when trying to post review comments. Using pull_request_target runs with the base repo's write token, allowing the AI to post reviews on all PRs.

Security

  • Only reads fork code (read-only)
  • Only posts comments (no code execution)
  • Follows same pattern as GitHub Copilot

@himanshu231204
himanshu231204 merged commit b71e0c5 into main Jul 22, 2026
9 checks passed
@github-actions

Copy link
Copy Markdown

🎉 Congratulations @himanshu231204!

Your pull request has been successfully merged into main. 🚀

Thank you for contributing to OpenAgentHQ and helping improve the project.

We truly appreciate your contribution and hope to see you back with more amazing PRs!

Happy Open Sourcing! ❤️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant